I see these crypter services that will build your rat client into a .reg or .vbs or .lnk. What else can be done? Is it possible to bind a rat with a image file? Another thing I'm confused about is a direct download link. How does that ever work? Sure it will automatically download, but the user still has to run it? Is there an exploit that just auto downloads and runs as admin?
What can I bind a RAT to? |
 (Feb 11, 2025 02:59 AM)kashitalford Wrote: I see these crypter services that will build your rat client into a .reg or .vbs or .lnk. What else can be done? Is it possible to bind a rat with a image file? Another thing I'm confused about is a direct download link. How does that ever work? Sure it will automatically download, but the user still has to run it? Is there an exploit that just auto downloads and runs as admin? VBS is the only format that is an actual executable format (albeit a deprecated one due to being commonly used to spread malware). And like I have explained here dozens of times before you can bind a binary file to an image file. Just dump your bytes at the end of a jpg with a hex editor and send it. Won't actually hide the code from antivirus, but it will be hidden from victims. |
|
|
